Malicious code in cluster-sirius-promise-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246366ab6b3632e7b423af9e451968b2bf746434d27260f7b68ffa2a924009ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-slidev-jest-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa53dde998cd4d2b52cd4e664c246bbd1b8b32bb6fa3a6e19a44c1a2133d56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kiat-ibuarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1ae965aa32fd400d9c1232f241b08a8f8b444feae42b8f4872c9961542de5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181857 Malicious code in avangs-olium-nila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac12fa37a584dfc9c5da2f072287546acac08431d3e657eb261c398e5a554816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fiffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49ede547620fef7a5e07900efd676e0e66ed0487eae453ae3f8f21b03973b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efp9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acc119e6145ac9d6bdf981889052ea5a22190c8d3897dc412c996c8212486c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dpdas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69bfd7069502a0c27dd86497127b8599699e72354b9757f260219b8a0fd10e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151514 Malicious code in abiuna-mobile-amuasbioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116ad934a346db13c285cd7c2cdd7f17a3d257ccd7480b80271656ddc698fe54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/loisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d464c7df50dd2e0b9d07fb864939e7eda575043e7fc8791e7b6e0c2babea6672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5593b78fd23e829e89188620c7a570058f0b300c1223edceb3cd30652f17db74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166050 Malicious code in slamet-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b887b9f05c1978cf6589440bc59a374619d4da4a7ba9b4c4a6b00ea2ac4d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162802 Malicious code in nokire-lokcek47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872803af115fa43448205f76dc6e7f72e7bf4e69c65f2e5452d61042eb7e7268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-cypress-auth0-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c18409218143999f63d9b4bb00c9a7582921a01c8ab912420d733ad20687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-kronos-oauth-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc815bc9ad378013849b00f6447853f5648e448a02cd211beacbeb2bc05de3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147664 Malicious code in sass-loader-cors-forever-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60893b7b6cf5046c9260fff05427269c4b95a7191986929c3fad39f1c32ec3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147527 Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-less-express-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a2f28d71d1862fe1f923bc1ffe145c137be676be0bd1b77de0183b4bddd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-acamar-relay-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe92343fac4e143ed5924503e48e35b5cd45f6ef2db00cb32599c848322da94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-yonder-mdx-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a05bd12471c26111582fb880b7b86a83151e218c40d900842b30e9e5b6c8b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133165 Malicious code in erick-sego46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989d5de0b266d1c86ef1f0514c9cefe24d037ec1498eae874a0ebead85c5d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...